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(54) METHOD AND DEVICE FOR ENTERING A COMPUTER DATABASE PASSWORD 



(57) The invention relates to computers, more par- 
ticularly to a method and apparatus for entering a pass- 
word to gain access to computer databases. The object 
of the invention is to provide efficient protection of the 
user's password from reproduction by an unauthorized 
person, to substantially increase the number of possible 
combinations and to create passwords that are maxi- 
mum easy for the users to memorize. An embodiment 
of the invention comprises entering parameters of a 
password entry dynamic image to a computer; display- 
ing to the user the dynamic image with the selected pa- 



rameters; pointing at least one predetermined object of 
the dynamic image that has taken a user-predetermined 
position in space and/or state in time. Another embodi- 
ment comprises setting a predetermined access code 
in the form of a rhythmic pattern; preliminary entering 
said rhythmic pattern via a user's entry device to a com- 
puter to store and use the rhythmic pattern in subse- 
quent password entries; when entering the password, 
entering said rhythmic pattern via a set of contact means 
of the user's entry device. 
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Description 

Field of the Invention 

[0001] The present invention relates to computers 
and specifically relates to a method for entering a pass- 
word to gain access to computer databases and an ap- 
paratus for implementing the method. 

Background of the Invention 

[0002] A method is known for entering a graphical 
password which requires a user to touch, via a mouse, 
areas of a graphical image on a display in a predeter- 
mined sequence (US Patent No. 5,559,961, IPC G06F 
11/00, published on September 24, 1996). 
[0003] The password, however, suffers from insuffi- 
cient security. Firstly, an unauthorized person can over- 
see and repeat the process of entering data of the pass- 
word. Secondly, the number of password patterns that 
could be generated is smali and the patterns are easy 
to produce by trial and error. In addition to the insufficient 
security, the prior art method suffers one problem more 
- not every password selected by the user can be easily 
memorized. To gain access to numerous databases, the 
user must remember a plurality of different password 
patterns, which becomes impossible due to abundance 
of such systems. 

[0004] A method is also known for entering a pass- 
word, involving the use of changing graphical images, 
such as digits, which requires a user to perform logical 
operations, such as subtraction, on images of digits that 
are displayed and conceived (JP Patent No.6-214954, 
IPC G06K 15/00, 3/02, published on August 5, 1944). 
Security provided by the method is quite high, but the 
required additional logical operations increase load on 
the user. 

SUMMARY OF THE INVENTION 

[0005] The object of the present invention is to provide 
a method and apparatus for entering a password to gain 
access to computer databases, that would overcome 
the aforementioned problems of the prior art. The 
present invention provides the following technical result: 
efficient protection of the user's password from repro- 
duction by an unauthorized person, substantially in- 
creased number of possible combinations to prevent 
learning the password by trial and error, and at the same 
time provision of passwords that are maximum easy for 
the users to memorize and convenient to enter. 
[0006] The above technical result is attained in a 
method for entering a password to gain access to a com- 
puter database, in accordance with the present inven- 
tion, comprising the steps of: determining parameters of 
a password entry dynamic image; entering said param- 
eters via a user's entry device to a computer and storing 
the parameters; displaying to the user on a display said 



dynamic image with the user-determined parameters; 
pointing, via time pointing means, at least one predeter- 
mined object of the dynamic image that has taken a us- 
er-predetermined position in space and/or state in time; 
5 comparing the stored parameters of the password entry 
dynamic image with parameters of said pointed objects 
of the dynamic image and, responsive to correspond- 
ence between said parameters, identifying the pass- 
word. 

10 [0007] The dynamic image is preferably a set of sev- 
eral screens, each having a time-variable state, wherein 
appearance of said predetermined object on at least one 
predetermined screen is pointed via the user's time 
pointing device, the state of the screen being preferably 

15 periodically varied. 

[0008] The parameters of the dynamic image are pref- 
erably selected from the group including a number of 
screens, a number of objects displayed on each of the 
screens, a state modification mode of each of the 

20 screens, a state modification rate of each of the screens, 
an indication of the order and screen on which the ob- 
jects of the dynamic image are to be selected, an indi- 
cation which of the screens are significant for entering 
the password, and combinations of the said parameters. 

25 [0009] The dynamic image may be an animated im- 
age including animated objects that vary position in 
space and/or state in time, wherein appearance of a pre- 
determined object in at least one position and/or state 
is pointed via the user's time pointing device. The pa- 

30 rameters of the dynamic image are selected from the 
group including a number of animated objects, an ani- 
mation rate of the objects, an indication in order the an- 
imated objects are to be selected, and an indication 
which of the animated objects are significant for entering 

35 the password. 

[0010] The above technical result is also attained in 
an apparatus for entering a password to gain access to 
a computer database, in accordance with the present 
invention, comprising: a user's entry device for entering 

40 parameters of a password entry dynamic image; a dis- 
play for displaying to the user the dynamic image with 
the user-selected parameters; time pointing means for 
pointing at least one predetermined object of the dynam- 
ic image that has taken a user-predetermined position 

45 jn space and/or state in time; means for storing the en- 
tered parameters of the password entry dynamic image, 
comparing said stored parameters with parameters of 
the pointed objects of the dynamic image and, respon- 
sive to correspondence between said parameters, iden- 

so tifying the password. 

[0011] The time pointing means preferably comprises 
at least one contact means to point the time when actu- 
ated by the user, and can be based on at least one entry 
device selected from the group including a mouse, a 

55 keyboard and a graphics tablet. 

[001 2] The apparatus for entering a password further 
comprises means for implementing a state variation 
mode of each of the screens, a state variation rate of 
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each of the screens, an animation rate of objects of the 
dynamic image, an order of selection of objects of the 
dynamic image on respective screens responsive to a 
user-entered indication which of the actuated contact 
means are significant for entering the password. 
[0013] The above technical result is attained in a 
method for entering a password to gain access to a com- 
puter database, in accordance with the present inven- 
tion, comprising the steps of: setting a predetermined 
access. code in the form of a rhythmic pattern; prelimi- 
nary entering said rhythmic pattern via a user's entry de- 
vice to a computer to store and use the rhythmic pattern 
in a subsequent password entry; when entering the 
password, entering said rhythmic pattern via the user's 
entry device; comparing the stored rhythmic pattern with 
the entered rhythmic pattern and, responsive to corre- 
spondence between them, identifying the password. 
[0014] The rhythmic pattern is preferably a fragment 
of a music composition, wherein contact means in a set 
of contact means are assigned functions of keys of a 
musical instrument. 

[001 5] The user's entry device may comprise at least 
one contact means, wherein a duration of each actua- 
tion of said contact means in the sequence of actuations 
is determined for entering the rhythmic pattern. 
[0016] Additionally, the rhythmic pattern may be a 
combination of long and short actuations of said contact 
means. 

[0017] The above technical result is also attained in 
an apparatus for entering a password to a computer da- 
tabase, in accordance with the invention, comprising: a 
user's entry device for entering a rhythmic pattern to a 
computer; means for storing the pre-selected rhythmic 
pattern entered via the user's entry device; means for 
comparing the stored rhythmic pattern with a rhythmic 
pattern entered by the user at subsequent password en- 
tries and, responsive to correspondence between them, 
identifying the password. 

[0018] The user's entry device is preferably selected 
from the group including a mouse, a keyboard and com- 
bination thereof, wherein a set of contact means for en- 
tering the rhythmic pattern is selected from said key- 
board and mouse, and each element of the rhythmic pat- 
tern may correspond to actuation of one of the contact 
means. 

[001 9] Furthermore, the set of contact means may in- 
clude groups of contact means having the same function 
so that to each element of the rhythmic pattern corre- 
sponds to actuation of any one of contact means in said 
group of contact means. 

Brief Description of the Drawings 

[0020] The invention will become more apparent from 
the following detailed description of its embodiments 
taken in conjunction with the attached drawings in 
which: 



Fig. 1 illustrates a first embodiment of a method for 
entering a password using a set of images that are 
dynamically displayed on a user's computer dis- 
play; 

5 Fig. 2 illustrates a second embodiment of a method 
for entering a password using an image with a dy- 
namically changing content displayed on a user's 
computer display; 

Fig. 3 represent in details the steps of a method for 
10 entering a password according to the second em- 
bodiment. 

Detailed Description of Preferred Embodiments 

15 [0021] In a first embodiment of a method is accord- 
ance with the present invention (Fig. 1), a user prede- 
termines a number of screens, type of images to be dis- 
played of each of the screens, a number of objects to 
be displayed on each of the screens, and an order and 

20 screen on which the objects of the dynamic image are 
to be selected. The user further determines which con- 
tact means (e.g. left or right button of a mouse or a cer- 
tain key on a keyboard, etc.) will be used to point the 
time of appearance of a predetermined object on a 

25 screen . The predetermined object of the dynamic image 
is an object that has taken a user-conceived position in 
space and/or state in time. 

[0022] The user can further determine which of the 
screens are significant for entering a password and 

30 which are not, i.e. which of the screens will be used to 
enhance security of the password entry. Respective us- 
er's settings are registered in software. 
[0023] According to Fig. 1 , a user is suggested to mon- 
itor appearance of graphic objects, predetermined for 

35 creating a password, on a user-defined number of 
screens (four in this case). The time when a user-pre- 
determined object appears on each screen is pointed 
via a selected contact means, e.g. by click of the left 
button of a mouse or by depression of a selected key 

40 on a keyboard. Contents of each screen may change 
periodically, any number of times according to the user's 
wish and at a selected rate. By way of example, a 
number of pictures periodically displayed on each 
screen is 20. A password can be defined by the user, e. 

45 g. as follows: appearance of a tiger on the right upper 
screen; appearance of a parrot on the left lower screen; 
appearance of a shark on the left upper screen; appear- 
ance of a butterfly on the right lower screen. This means 
that the first time mark made by the contact means is 

so addressed to the right upper screen; the second one is 
addressed to the left lower screen; the third one is ad- 
dressed to the upper left screen, and the forth one is 
addressed to the right lower screen, which corresponds 
to the user-defined order of selection of the objects on 

55 respective screens. A feature of the password entry is 
that when pointing the time of appearance of a prede- 
termined object the process of displaying the objects will 
be continued until the password is completely entered. 
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Nothing reveals the password entry process on the dis- 
play, therefore, an unauthorized person could not know 
the appearance of which object and on which screen is 
being monitored by the user, i.e. the appearance of 
which objects on which screens and in which order is 
pointed by the user. 

[0024] Functions of storing the entered parameters of 
the password entry dynamic image, comparing said 
stored parameters with parameters of the pointed ob- 
jects of the dynamic image and, responsive to corre- 
spondence between the parameters, identifying the 
password are implemented in an appropriate software. 
[0025] The password entry process can be realized 
in a number of ways. First, selection of password objects 
is not mandatory on every screen, i.e. in determining a 
number of screens to be displayed the user may specify 
any number of significant screens, e.g. three. In this 
case, a password will consist of any three objects of the 
dynamic image. Second, a particular contact means 
may be selected to point the time of appearance of each 
of the objects. In this case, an exemplary password de- 
scribed above with reference to Fig. 1 will be as follows. 
If the user's password corresponds to appearance of a 
tiger on the right upper screen, a parrot on the left lower 
screen, a shark on the left upper screen and a butterfly 
on a right lower screen, the user may point the time of 
appearance of a tiger via the left button, a parrot via the 
right button, a shark via the left button, and a butterfly 
via the left button of the mouse. Therefore, the user him- 
self selects the security of his (or her) password and 
complexity of its memorizing. Third, when setting a 
password the user may select contact means insignifi- 
cant for creating the password. That is the right button 
of the mouse is insignificant in the described password, 
hence, it does not affect the password entry when de- 
pressed. This further enhances the password protection 
from an unauthorized viewer - in addition to the fact that 
the viewer does not know the appearance of which ob- 
ject and on which screen is being monitored by the user, 
he (or she) does not know whether the appearance of 
this object is significant for the password, i.e. whether 
actuation of a certain contact means is significant for the 
password entry. 

[0026] In another embodiment illustrated in Fig.2, a 
user is suggested to monitor selected objects that are 
united in a dynamic (animated) image. According to Fig. 
2, objects shown in the displayed picture, such as a 
child, a ball, a fish and a butterfly, change their position 
in space, while an object, such as a bird, changes its 
state, i.e. is flying, without changing its coordinates. The 
time when the animated objects take a predetermined 
position in space or a predetermined state in time is 
pointed by the user via any one selected time pointing 
device (e.g. by click of a mouse or depression of a se- 
lected key on a keyboard). The user's password may 
correspond to the states of the animated objects at the 
instants when the fish is in water with its head (Fig.3a), 
the child sits still near the ball (Fig.3b), the ball appears 



on the screen (Fig.3c), the butterfly is above the right- 
most umbrella (Fig.3d) and the bird's wings are up (Fig. 
3e). Therefore, the first time mark, e.g. the first click of 
the mouse, is addressed to the fish, the second one is 
s addressed to the child, the third one is addressed to the 
bail, the forth one is addressed to the umbrella, and the 
fifth one is addressed to the bird, which must correspond 
to the user-defined order of selection of the animated 
objects. 

io [0027] A feature of the password entry is that when 
pointing the time of appearance of a predetermined ob- 
ject at a predetermined point of space or attainment by 
a predetermined object of a predetermined state in time, 
the process of displaying the animated objects will be 

*s continued until the password is completely entered. 
Nothing reveals the password entry process on the dis- 
play, therefore, an unauthorized person will not know 
which position in space and/or state in time is being 
monitored by the user, and in which order they are point- 

20 ed by the user. The animated objects are repeatedly dis- 
played at the user-defined animation rate in the case the 
user has not managed to timely point a respective object 
in the predetermined position. All of the described fea- 
tures of password creation can be used: selection of all 

25 of the animated password objects on the dynamic object 
is not mandatory, i.e. when determining objects for the 
password entry the user may declare any objects to be 
significant. 

[0028] Such functions as selection of a state modifi- 
30 cation mode of each of the screens, determination of a 
state modification rate of each of the screens, determi- 
nation of an object animation rate of the dynamic image, 
an order of selection of objects of the dynamic image on 
respective screens responsive to the user-entered indi- 
35 cation as to which of the actuated means are significant 
for the password entry, are implemented by an appro- 
priate software. 

[0029] To enter a password that represents a rhythmic 
pattern, the user must enter a predetermined rhythmic 
40 pattern via predetermined contact means. The rhythmic 
pattern may be a fragment of a music composition, and 
the contact means may be assigned functions of keys 
of a musical instrument. 

[0030] By way of example, a user selects the left and 
45 right buttons of a mouse as a password entry device. 
The user's password can be set as follows: three de- 
pressions of the left button, two depressions of the right 
button, three depressions of the right button, two de- 
pressions of the left button, three depressions of the 
so right button, one depression of the left button, one de- 
pression of the right button, one depression of the left 
button, one depression of the right button, and two de- 
pressions of the left button. Such a seemingly difficult- 
to-memorize password represents a popular melody, 
55 "Dog's waltz", played on two keys of a key-driven musi- 
cal instrument. The password is hard to oversee and re- 
peat, as the user's hand fully covers the mouse, and the 
fingers stay constantly on both contact means - it is dif- 
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ficult to realize which button of the mouse is depressed 
and how many times. Only the user knows the key mel- 
ody which facilitates memorizing the password as a re- 
spective rhythmic pattern, and the number and order of 
actuations of each of the selected contact means. In cre- 
ation of such a password, the user may select as contact 
means for the password entry any means from the group 
including keyboard keys, mouse buttons and combina- 
tions thereof, as well as combinations of contact means 
having identical functions. By way of example, to enter 
the aforementioned password the user may select the 
upper (numeric) row of the keyboard instead of the left 
mouse button, and the right field of the keyboard, also 
numeric, instead of the right mouse button. In the proc- 
ess of the password entry, each button in every group 
of buttons has identical meaning. Therefore, it is not im- 
portant which of the buttons in the group is depressed, 
only the group - right or left - to which it belongs is of 
importance. This method of entering a password en- 
hances protection from an unauthorized viewer, be- 
cause the viewer not only does not "hear" the rhythmic 
pattern being entered, but does not know either which 
of the contact means corresponds, by its meaning, to 
each element of the code. The rhythmic pattern code 
may contain any number of "sounds", i.e. depressions 
of the contact means, depending on the user's ability to 
memorize it. 

[0031] The user-entered rhythmic pattern is com- 
pared with the pre-stored rhythmic pattern and the pass- 
word is identified responsive to correspondence be- 
tween them. Tr^ese functions can be implemented by a 
software. 

[0032] In an embodiment, a rhythmic pattern may be 
entered as a combination of long and short actuations 
of user-defined contact means. 
[0033] The process of entering a password in the form 
of a rhythmic pattern is not accompanied by displaying 
any images on the screen, and access to a computer 
database cannot be gained until the password is com- 
pletely entered. 

[0034] The password entry using a dynamic picture 
possesses the following advantages: a great number of 
possible combinations can be created as each of the 
animated objects may take a sufficient number of easily 
memorized positions; protection from an unauthorized 
person, an intruder, can be enhanced by any one of the 
described means or combinations thereof. Therefore, a 
method for entering a password in accordance with the 
invention overcomes basic problems encountered by 
the user in selection, memorizing and protection of his 
(or her) password for gaining access to computer data- 
bases. 

[0035] The password entry using a rhythmic pattern 
possesses the following advantages: a great number of 
combinations created on the basis of popular melodies 
and rhythms provide easy and simple memorizing a 
password by user; methods for entering rhythmic pat- 
terns additionally enhance protection from an unauthor- 



ized viewer. 
Industrial Applicability 

5 [0036] The present invention can be used to create 
means for entering a password to access computer da- 
tabases, to provide secure access to mobile telephones, 
terminals of financial transaction systems, as well as in 
security systems of protected territories equipped with 

10 video monitors. 



Claims 

*5 1 . A method for entering a password to gain access to 
a computer database, comprising the steps of: 

determining parameters of a password entry 
dynamic image, entering said parameters via a 
20 user's entry device to a computer and storing 

said parameters; 

displaying to the user on a display said dynamic 
image with the user-determined parameters; 
pointing, via time pointing means, at least one 

25 predetermined object of said dynamic image 

that has taken a user-predetermined position in 
space and/or state in time; 
comparing said stored parameters of the pass- 
word entry dynamic image with parameters of 

30 said pointed objects of the dynamic image and, 

responsive to correspondence between said 
parameters, identifying the password. 

2. The method of claim 1 characterized in that said 
35 dynamic image is a set of several screens, each 

having a time-variable state, wherein appearance 
of said predetermined object on at least one prede- 
termined screen is pointed via the user's time point- 
ing device. 

40 

3. The method of claim 2 characterized In that the 

state of the screen is periodically varied. 

4. The method of claim 2 or 3 characterized In that 

45 said parameters of the dynamic image are selected 
from the group including a number of screens, a 
number of objects displayed on each of the screens, 
a state modification mode of each of the screens, a 
state modification rate of each of the screens, an 

so indication of the order and screen on which the ob- 
jects of the dynamic image are to be selected, an 
indication which of the screens are significant for 
entering a password, and combination of said pa- 
rameters. 

55 

5. The method of claim 1 characterized in that said 
dynamic image is an animated image including an- 
imated objects that vary position in space and/or 
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state in time, wherein appearance of a predeter- 
mined object in at least one position and/or state is 
pointed via the user's time pointing device. 

6. The method of claim 5 characterized In that said 
parameters of the dynamic image are selected from 
the group including a number of animated objects, 
an animation rate of the objects, an indication in 
which order the animated objects are to be select- 
ed, and an indication which of the animated objects 
are significant for entering the password. 

7. An apparatus for entering a password to gain ac- 
cess to a computer database, comprising 

a user's entry device for entering parameters 
of a password entry dynamic image to a computer; 

a display for displaying to the user the dynam- 
ic image with the user-selected parameters; 

time pointing means for pointing at least one 
predetermined object of the dynamic image that has 
taken a user-predetermined position in space and/ 
or state in time; 

means for storing the entered parameters of 
the password entry dynamic image, comparing said 
stored parameters with parameters of the pointed 
objects of the dynamic image and, responsive to 
correspondence between the parameters, identify- 
ing the password. 

8. The apparatus of claim / characterized in that said 
time pointing means comprises at least one contact 
means to point the time when actuated by the user. 

9. The apparatus of claim 7 or 8 characterized in that 
said time pointing means is based on at least one 
entry device selected from the group including a 
mouse, a keyboard and a graphic tablet. 

10. The apparatus of any one of claims 7 to 9 charac- 
terized by further comprising means for implement- 
ing a state modification mode of each of the 
screens, a state modification rate of each of the 
screens, an animation rate of objects of the dynamic 
image, an order of selection of objects of the dy- 
namic image on respective screens responsive to 
a user-entered indication which of the actuated con- 
tact means are significant for entering the pass- 
word. 

1 1 . A method for entering a password to gain access to 
a computer database, comprising the steps of: 

setting a predetermined access code in the 
form of a rhythmic pattern; 
' preliminary entering said rhythmic pattern via a 
user's entry device to a computer to store and 
use said rhythmic pattern in a subsequent 
password entry; 



when entering the password, entering said 
rhythmic pattern via said user's entry device; 
comparing said stored rhythmic pattern with the 
entered rhythmic pattern and, responsive to 
5 correspondence between said rhythmic pat- 

terns, identifying the password. 

12. The method of claim 11 characterized in that said 
user's entry device comprises a set of contact 
10 means, wherein a predetermined number of contact 
means and an order of actuations of the contact 
means by the user are selected for entering the 
rhythmic pattern. 

15 13. The method of claim 11 or 1 2 characterized in that 
said rhythmic pattern is a fragment of a music com- 
position, wherein said contact means in said set of 
contact means are assigned functions of keys of a 
musical instrument. 

20 

14. The method of claim 11 characterized in that said 
user's entry device comprises at least one contact 
means, wherein a duration of each actuation of said 
contact means in the sequence of actuations there- 

25 of is determined for entering the rtiythmic pattern. 

1 5. The method of claim 1 3 or 1 4 characterized in that 
said rhythmic pattern is a combination of long and 
short actuations of said contact means. 

30 

1 6. An apparatus for entering a password to a computer 
database, comprising 

a user's entry device for entering a rhythmic 
pattern to a computer; 
35 means for storing the pre-selected rhythmic 

pattern entered via the user's entry device; 

means for comparing said stored rhythmic 
pattern with a rhythmic pattern entered by the user 
at subsequent password entries and, responsive to 
40 correspondence between said rhythmic patterns, 
identifying the password. 

17. The apparatus of claim 16 characterized in that 
said user's entry device is selected from the group 

45 including a mouse, a keyboard and combination 
thereof, wherein a set of contact means for entering 
the rhythmic pattern is selected from said keyboard 
and mouse. 

50 18. The apparatus of claim 17 characterized in that 
each element of said rhythmic pattern corresponds 
to actuation of one of the contact means. 

19. The apparatus of claim 1 / characterized in that said 
55 set of contact means includes groups of contact means 
having the same function so that each element of said 
rhythmic pattern corresponds to actuation of any one 
of contact means in said group of contact means. 
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Figure 3b 
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